IL316467A - Privacy-preserving filtering of encrypted traffic - Google Patents

Privacy-preserving filtering of encrypted traffic

Info

Publication number
IL316467A
IL316467A IL316467A IL31646724A IL316467A IL 316467 A IL316467 A IL 316467A IL 316467 A IL316467 A IL 316467A IL 31646724 A IL31646724 A IL 31646724A IL 316467 A IL316467 A IL 316467A
Authority
IL
Israel
Prior art keywords
privacy
encrypted traffic
preserving filtering
preserving
filtering
Prior art date
Application number
IL316467A
Other languages
English (en)
Hebrew (he)
Original Assignee
Bitdefender Ipr Man Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Bitdefender Ipr Man Ltd filed Critical Bitdefender Ipr Man Ltd
Publication of IL316467A publication Critical patent/IL316467A/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0281—Proxies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/45—Network directories; Name-to-address mapping
    • H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
    • H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/59—Network arrangements, protocols or services for addressing or naming using proxies for addressing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0464—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101—Access control lists [ACL]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/168—Implementing security features at a particular protocol layer above the transport layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0866—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/062—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying encryption of the keys

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)
IL316467A 2022-05-24 2023-05-05 Privacy-preserving filtering of encrypted traffic IL316467A (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US17/664,803 US12250296B2 (en) 2022-05-24 2022-05-24 Privacy-preserving filtering of encrypted traffic via handshake decryption and re-encryption
PCT/EP2023/061924 WO2023227350A1 (en) 2022-05-24 2023-05-05 Privacy-preserving filtering of encrypted traffic

Publications (1)

Publication Number Publication Date
IL316467A true IL316467A (en) 2024-12-01

Family

ID=86424946

Family Applications (1)

Application Number Title Priority Date Filing Date
IL316467A IL316467A (en) 2022-05-24 2023-05-05 Privacy-preserving filtering of encrypted traffic

Country Status (9)

Country Link
US (2) US12250296B2 (de)
EP (1) EP4533737A1 (de)
JP (1) JP2025517489A (de)
KR (1) KR20250012545A (de)
CN (1) CN119547381A (de)
AU (1) AU2023276790A1 (de)
CA (1) CA3247829A1 (de)
IL (1) IL316467A (de)
WO (1) WO2023227350A1 (de)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US12052274B2 (en) 2021-09-23 2024-07-30 Armis Security Ltd. Techniques for enriching device profiles and mitigating cybersecurity threats using enriched device profiles
US12572846B2 (en) 2022-03-22 2026-03-10 Armis Security Ltd. System and method for device attribute identification based on host configuration protocols
US20230394136A1 (en) * 2022-06-01 2023-12-07 Armis Security Ltd. System and method for device attribute identification based on queries of interest
US12470593B2 (en) 2022-07-11 2025-11-11 Armis Security Ltd. Malicious lateral movement detection using remote system protocols
US12457243B2 (en) * 2024-03-05 2025-10-28 Netscout Systems, Inc. Systems and methods for correlating decrypted TLS messages with network data in real time
US12530265B1 (en) * 2024-07-16 2026-01-20 Charter Communications Operating, Llc Content delivery control and distribution

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8190879B2 (en) 2009-12-17 2012-05-29 Cisco Technology, Inc. Graceful conversion of a security to a non-security transparent proxy
US8739243B1 (en) * 2013-04-18 2014-05-27 Phantom Technologies, Inc. Selectively performing man in the middle decryption
US9419942B1 (en) 2013-06-05 2016-08-16 Palo Alto Networks, Inc. Destination domain extraction for secure protocols
US11070533B2 (en) * 2019-10-10 2021-07-20 Forcepoint Llc Encrypted server name indication inspection
US11356423B2 (en) 2020-01-14 2022-06-07 Cisco Technology, Inc. Managing encrypted server-name-indication (ESNI) at proxy devices
US11632254B2 (en) 2020-02-21 2023-04-18 Mcafee, Llc Home or enterprise router-based secure domain name services
US10924456B1 (en) 2020-07-14 2021-02-16 Centripetal Networks, Inc. Methods and systems for efficient encrypted SNI filtering for cybersecurity applications

Also Published As

Publication number Publication date
US12250296B2 (en) 2025-03-11
KR20250012545A (ko) 2025-01-24
CN119547381A (zh) 2025-02-28
WO2023227350A1 (en) 2023-11-30
CA3247829A1 (en) 2023-11-30
US20250192992A1 (en) 2025-06-12
US20230388106A1 (en) 2023-11-30
AU2023276790A1 (en) 2024-10-24
EP4533737A1 (de) 2025-04-09
JP2025517489A (ja) 2025-06-05

Similar Documents

Publication Publication Date Title
IL316467A (en) Privacy-preserving filtering of encrypted traffic
PL3810682T3 (pl) Sposób oczyszczania odzyskanego polipropylenu
EP3520315A4 (de) Lineare maskierungsschaltungen zur seitenkanalimmunisierung von hardware mit fortgeschrittenem verschlüsselungsstandard
EP4085685A4 (de) Systeme und verfahren zur echtzeitüberwachung und optimierung mobiler netzwerke
CL2016001876A1 (es) Macrociclos de diarilo como moduladores de la proteína quinasa
NZ732940A (en) Selective bace1 inhibitors
EP4079735A4 (de) Verbindung zur hemmung und induktion des abbaus von egfr-kinasen
IL315102A (en) COMPOSITIONS AND METHODS FOR THE TREATMENT OF VIRAL INFECTIONS
EA201391251A1 (ru) ПРОИЗВОДНЫЕ 6,7-ДИГИДРОПИРАЗОЛО[1,5-a]ПИРАЗИН-4-ИЛАМИНА, ПРИГОДНЫЕ В КАЧЕСТВЕ ИНГИБИТОРОВ БЕТА-СЕКРЕТАЗЫ (BACE)
EP4138854A4 (de) Verkappungsverbindungen, zusammensetzungen und verfahren zur verwendung davon
HK1205114A1 (en) Asymmetric syntheses for spiro-oxindole compounds useful as therapeutic agents
EA201491102A1 (ru) Производные 5-(3-аминофенил)-5-алкил-5,6-дигидро-2h-[1,4]оксазин-3-амина
IT201700097630A1 (it) Processo per la preparazione di blocchi/lastre/masselli fotocatalitici e relativi blocchi/lastre/masselli fotocatalitici
EP3992193A4 (de) Pyrazolopyrimidinverbindung, herstellungsverfahren dafür und anwendungen davon
EP4330937A4 (de) Fernfilterung von fahrzeugkommunikationen
EP4039026A4 (de) Zeitfrequenzblocklöschung
ZA202104889B (en) Purification of oil
IL310068A (en) Immunoglobulin G purification method and its uses
GB2565591B (en) Method of purifying phycocyanin
GB2614981B (en) Therapeutic cure-pro compounds for targeted degradation of bet domain proteins, and methods of making and using them
EP4203965A4 (de) Verbindungen und verfahren zur prävention und behandlung von virusinfektionen
IT201700035316A1 (it) Metodo e sistema di cooperazione tra access gateway per la condivisione di banda
SG11202106921TA (en) Head space for depth filters and method of using same
EP4477385C0 (de) Negativform zur gepäckformung und anwendung davon
EP3608665A4 (de) Verfahren zur herstellung eines gereinigten produkts aus proteinmodifizierten phosphorintegrierten partikeln, verfahren zur herstellung einer fluoreszierenden färbeflüssigkeit, gereinigtes produkt aus proteinmodifizierten phosphorintegrierten partikeln und filter zur reinigung einer fluoreszierenden färbeflüssigkeit und proteinmodifizierte phosphorintegrierte partikel